$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa File: 8ae67e8a-104d-3a84-8b85-450caa25862f.roa (raw, json) Hash identifier: Adt+6BncObdjrOkHz5ZUrsG4ehOhcCAw3vv2GtNBKUQ= Subject key identifier: 74:CF:06:38:66:F7:AE:B7:67:7C:32:F1:06:21:60:47:86:86:B6:B8 Certificate issuer: /CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Certificate serial: 010D0C9F43285848A99621875A5F1282AA041230 Authority key identifier: D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 32402 IP address blocks: 199.7.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:21:87:5a:5f:12:82:aa:04:12:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8e4dfa-e90e-4e3d-a515-901708c3f7f8 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=64a5643f-0848-4385-8370-ab797e2fe410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:09:06:a9:2d:dd:ab:98:f5:1a:2f:bf:b9: 99:27:fd:44:bd:3b:f7:2b:0c:1a:71:14:ec:d4:18: de:72:de:ec:8a:a9:31:b9:0e:bd:cf:c0:c7:e6:63: 46:8c:d0:e5:a4:8d:1d:73:2c:1c:26:11:7d:68:4a: 3e:22:9c:ce:f0:ae:37:45:8e:38:61:d4:fc:a9:16: b4:cd:4e:97:87:60:4f:87:a8:0b:5d:bc:bc:6a:27: 46:10:05:d1:10:af:a0:c4:37:6e:55:ee:60:6f:db: df:0b:0b:10:9a:15:2e:c4:63:4b:c0:9e:45:62:84: 5a:3f:91:19:89:c2:68:a8:70:6a:f0:f9:fb:b5:a7: d7:cc:0c:07:be:7d:f1:8c:48:7f:fa:c1:70:69:94: 50:08:27:e0:3c:e5:20:75:e2:24:bc:b0:a4:a9:04: 84:56:df:26:ca:1c:53:14:5b:4a:f8:c0:87:84:19: cf:05:f5:77:e9:f8:05:3f:6c:f3:ae:94:5b:98:21: 78:bf:aa:26:56:3a:ab:64:e2:d1:9e:d9:b3:25:79: 72:a6:25:6d:7b:16:60:87:6c:97:32:ab:1f:ed:37: 3f:d8:16:ff:26:63:e1:e2:83:f6:5f:fe:27:27:03: 6b:e5:91:d7:54:50:b1:e0:26:b7:b6:e0:ea:c8:f1: 15:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CF:06:38:66:F7:AE:B7:67:7C:32:F1:06:21:60:47:86:86:B6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/8ae67e8a-104d-3a84-8b85-450caa25862f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.crl X509v3 Authority Key Identifier: keyid:D9:1D:19:AF:3F:93:04:6D:4D:59:36:4D:D7:1C:E9:87:1B:5D:84:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed8e4dfa-e90e-4e3d-a515-901708c3f7f8.cer sbgp-ipAddrBlock: critical IPv4: 199.7.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:13:a6:f6:02:8d:69:bb:ea:4f:f7:f3:f5:25:36:aa:dc:15: 39:ba:93:af:24:35:6c:76:73:b7:b1:9d:0f:b0:9a:26:c0:87: df:e8:86:6a:af:c8:e5:17:13:56:e1:12:16:88:80:3c:18:98: 43:ca:e9:39:2a:e9:bf:8c:4e:c7:63:32:53:32:7b:e8:6b:44: e5:b7:4f:4f:51:3d:08:76:1b:5a:eb:a8:48:fe:91:5d:67:54: f8:d7:f6:1d:b5:74:5c:fe:3d:23:ce:46:70:38:90:23:b3:14: a0:b0:07:6a:db:25:22:fd:8b:12:21:a7:50:9d:d6:bb:84:2f: 20:1b:1a:e0:e1:ca:67:80:70:43:7a:db:a7:c9:dc:6c:cb:73: 0c:df:e6:21:e3:c9:c4:ba:48:89:86:05:44:fb:01:18:2e:83: ba:65:99:4f:d6:af:a8:de:d1:78:49:95:08:37:5b:fb:63:2d: d7:cd:ce:bd:e1:99:95:07:83:06:0f:fb:35:3c:e1:83:ff:22: 12:b3:6f:8a:89:27:24:13:d8:cd:e4:28:5d:39:71:6f:a4:ad: 30:7f:26:c9:78:a6:89:12:74:d4:b6:8b:8e:21:bc:b6:ba:1a: e6:1c:f1:8c:7c:7d:77:b3:6a:14:95:bd:b3:e4:cd:53:65:78: e8:36:d6:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliGHWl8SgqoEEjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1MTUtOTAxNzA4YzNm N2Y4MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjRhNTY0M2YtMDg0OC00Mzg1LTgzNzAtYWI3OTdlMmZlNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWQJBqkt3auY9Rovv7mZJ/1EvTv3KwwacRTs 1Bject7siqkxuQ69z8DH5mNGjNDlpI0dcywcJhF9aEo+IpzO8K43RY44YdT8qRa0 zU6Xh2BPh6gLXby8aidGEAXREK+gxDduVe5gb9vfCwsQmhUuxGNLwJ5FYoRaP5EZ icJoqHBq8Pn7tafXzAwHvn3xjEh/+sFwaZRQCCfgPOUgdeIkvLCkqQSEVt8myhxT FFtK+MCHhBnPBfV36fgFP2zzrpRbmCF4v6omVjqrZOLRntmzJXlypiVtexZgh2yX Mqsf7Tc/2Bb/JmPh4oP2X/4nJwNr5ZHXVFCx4Ca3tuDqyPEVgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTPBjhm9663Z3wy8QYhYEeGhra4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZDhl NGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3MDhjM2Y3ZjgvOGFlNjdlOGEtMTA0ZC0z YTg0LThiODUtNDUwY2FhMjU4NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWQ4ZTRkZmEtZTkwZS00ZTNkLWE1 MTUtOTAxNzA4YzNmN2Y4L2VkOGU0ZGZhLWU5MGUtNGUzZC1hNTE1LTkwMTcwOGMz ZjdmOC5jcmwwHwYDVR0jBBgwFoAU2R0Zrz+TBG1NWTZN1xzphxtdhOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZDhlNGRmYS1lOTBlLTRlM2QtYTUxNS05MDE3 MDhjM2Y3ZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsTpvYCjWm76k/38/UlNqrcFTm6k68kNWx2c7exnQ+wmibAh9/ohmqv yOUXE1bhEhaIgDwYmEPK6Tkq6b+MTsdjMlMye+hrROW3T09RPQh2G1rrqEj+kV1n VPjX9h21dFz+PSPORnA4kCOzFKCwB2rbJSL9ixIhp1Cd1ruELyAbGuDhymeAcEN6 26fJ3GzLcwzf5iHjycS6SImGBUT7ARgug7plmU/Wr6je0XhJlQg3W/tjLdfNzr3h mZUHgwYP+zU84YP/IhKzb4qJJyQT2M3kKF05cW+krTB/Jsl4pokSdNS2i44hvLa6 GuYc8Yx8fXezahSVvbPkzVNleOg21hg= -----END CERTIFICATE-----Generated at Sat Apr 5 12:31:32 2025 by rpki-client